CVE-2022-23743CWE-269

Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process

published May 11, 2022

CVSS
—
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process. In addition, weak permissions in the ProgramData\CheckPoint\ZoneAlarm\Data\Updates directory allow a local attacker the ability to execute an arbitrary file write, leading to execution of code as local system, in ZoneAlarm versions before v15.8.211.192119

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00419 · 35.1th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-05-11T00:00Z
EPSS history
Timeline
  • 11 MAY 00:00Z
    Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process
    cvelistv5